Sites doing mass IP/ASN/etc blocking, and lying to the user about it:
| Site | Lie |
|---|---|
| Anything using CF Turnstile | captcha loops forever on some IPs |
| cpu-world.com | Connections silently dropped |
| crt.sh | Connections silently dropped |
| dominos.com | Everything works except the final API call to submit an order silently fails |
| etsy.com | When registering an account: “Sorry! There was a problem on our end. Please try registering again or email support@etsy.com for assistance.” Support@ address auto-replies with “This is not a monitored inbox.” |
| genius.com | Displays a condescending and infantile page claiming the site is down. In actuality HTTP status is 403 because you are blocked and “refreshing the page might help” is a lie |
| github.com | |
| gofundme.com | Claims 502 bad gateway |
| he.net tunnelbroker | Connections to common IRC ports are blocked |
| imgur.com | Returns json claiming imgur is over capacity and a 403 status. HTTP status is actually 429. |
| mercari.com | Site lies and says user/pass is invalid, same user/pass works from a different IP |
| mouser.com | CAPTCHA loop |
| padmapper.com | Returns fictitious HTTP 433 for all requests |
| reddit.com | Completely blocked and accused of scraping which I haven't done |
| segaretro.org | All edits blocked as spam |
| twitch.tv | Firefox+Linux users randomly blocked from doing anything related to accounts. |
| *.weebly.com | Connections silently dropped |
| Microsoft various services | Media Creation Tool silently exits if it thinks you're on a sus connection |
“Honorable” mentions:
| Site | Details |
|---|---|
| 10minutemail.com | IPs/ASNs blocked via cloudflare. Hilarious that a site mostly used for spam registrations would block anyone |
| auth.meta.com | Clientside JS broken in Firefox while setting up 2FA, error message is a lie |
| buyee.jp | 403, no message |
| discord.com | New account creations are instantly phone-locked |
| facebook.com | Forces login, even when browsing public profiles (such as companies) |
| gsaauctions.gov | My taxes probably fund this shit and I'm blocked from it |
| instagram.com | Forces login. Account creation is also effectively impossible |
| kabum.com.br | At least returns HTTP 403, but the text is not helpful |
| rateyourmusic.com | Makes you go through CF Turnstile and then displays a blocked page |
| vrchat.com (all domains/services) | Used to do mass ASN blocking. Web requests would get a cloudflare block page, but API calls from the client would fail in non-obvious ways. Seems to be reverted since 2FA was forced on everyone. Protonmail completely blocked |
| yelp.com | Blank page, HTTP 403 |